--- title: "TODO:" weight: 1 tags: - images - buildpacks --- ## Problems * Dockerfiles are hard and not 100% reproducible * Buildpoacks are reproducible but result in large single-arch images * Nix has multiple ways of doing things ## Solutions * Degger as a CI solution * Multistage docker images with distroless -> Small image, small attack surcface * Language specific solutions (ki, jib)